The Data Protection & Identity Manager will own and advance Extreme's strategy for both identity governance across both human and non-human (AI agent) identities, as well as the enterprise-wide Data Loss Prevention (DLP) program. This role is pivotal to the establishing control over ALL identities, enforcing DLP policies, protecting Extreme’s and stakeholder date, thus reducing the organization's exposure to credential theft, data exfiltration, and malicious activity.The successful candidate will bring deep technical expertise, strong cross-functional collaboration skills, and the leadership to build scalable security programs in a fast-moving AI-driven environment.Key Responsibilities:Identity Governance & Non-Human Identity (NHI) ManagementDesign, implement, and operate a unified Identity Governance & Administration (IGA) program covering human, service account, and AI agent identities — with particular focus on controlling the rapidly growing population of AI agent identities, creating the appropriate governance structure and guardrails based on best practice.Establish lifecycle management processes for AI agent identities, including provisioning, entitlement review, and decommissioning, mitigating exposure to credential theft and malicious activityDefine and enforce least privilege access models and zero-trust principles across all identity typesDevelop and maintain a real-time inventory of AI agent identities, their access scopes, and associated risk profilesPartner with AI platform and engineering teams to embed identity security controls into agent deployment pipelinesLead regular access certification and entitlement review cycles across the enterpriseIntegrate the process for human identity management with the AI agent identities to create a cohesive strategy.Be a thought leader within Extreme on how the adoption of AI agents can be utilized to add value across the enterpriseData Loss Prevention (DLP)Own and mature the enterprise DLP strategy, policy framework, and toolset, ensuring coverage extends to AI-assisted and agent-driven data flowsDrive full coverage of data tagging, classification, and sensitivity labelling across structured and unstructured data estatesDefine and enforce DLP policies for email, endpoint, cloud, and AI-assisted workflowsManage the DLP exception review process, ensuring risk-based approvals with appropriate audit trailsMonitor DLP telemetry and investigate high-severity incidents in conjunction with the Security Operations CentreReport on DLP program effectiveness, policy coverage, and incident trends to senior leadership and relevant regulatory stakeholdersJob RequirementsThe job requirements include but are not limited to the following.Hands-on experience designing and operating identity governance programs, including non-human and service account identity managementDemonstrated expertise in enterprise DLP tooling (e.g., Microsoft Purview, Symantec DLP, Zscaler) and policy developmentExperience with AI/ML platform security, including securing LLM-based agents, APIs, and automation pipelines, ad MCP environmentsStrong understanding of zero-trust architecture, least-privilege principles, and privileged access management (PAM)Familiarity with data classification frameworks and sensitivity labelling at enterprise scaleAbility to lead cross-functional initiatives and influence stakeholders without direct authorityStrong analytical and risk assessment skills; ability to translate technical risk into business impactExcellent written and verbal communication skills, including executive-level reportingAbility to manage multiple concurrent priorities and tasks in a fast-paced, high-growth environmentSelf-starter with a continuous improvement mindset and a drive to challenge existing processesWorking ScheduleMonday–Friday, 40 hours per week. On-call rotation required for high-severity DLP or identity incidents outside standard hours.Experience & Qualifications8+ years of experience in Information Security, with a minimum of 3 years in identity governance, IAM, or data protection rolesExperience securing environments with significant AI/ML or automation workloads is strongly preferredHands-on experience with Microsoft Entra ID (Azure AD), Okta, SailPoint, or equivalent IGA platformsExperience with SIEM, CASB, and endpoint DLP solutions in enterprise environmentsRelevant certifications preferred: CISSP, CISM, CCSP, Microsoft SC-300, or equivalentBachelor's degree in Computer Science, Information Security, or a related field — or equivalent practical experienceExtreme Networks, Inc. creates effortless networking experiences that enable all of us to advance. We push the boundaries of technology leveraging the powers of machine learning, artificial intelligence, analytics, and automation.
19 days ago